Remove superfluous casts
- Every non-const pointer converts automatically to void *. - Every pointer converts automatically to void *. - void * converts to any other pointer. - const void * converts to any other const pointer. - Integer variables convert to each other. I changed the declaration of a few variables in order to allow removing a cast. However, I didn't attempt to edit casts inside comparisons, since they are very delicate. I also kept casts in variadic functions, since they are necessary, and in allocation functions, because I have other plans for them. I also changed a few casts to int that are better as ptrdiff_t. This change has triggered some warnings about const correctness issues, which have also been fixed in this patch (see for example src/login.c). Signed-off-by: Alejandro Colomar <alx@kernel.org>
This commit is contained in:
committed by
Serge Hallyn
parent
66daa74232
commit
bddcd9b095
30
src/chage.c
30
src/chage.c
@@ -103,8 +103,7 @@ fail_exit (int code)
|
||||
#ifdef WITH_AUDIT
|
||||
if (E_SUCCESS != code) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change age",
|
||||
user_name, (unsigned int) user_uid, 0);
|
||||
"change age", user_name, user_uid, 0);
|
||||
}
|
||||
#endif
|
||||
|
||||
@@ -260,7 +259,7 @@ static void list_fields (void)
|
||||
(void) puts (_("password must be changed"));
|
||||
} else {
|
||||
changed = lstchgdate * SCALE;
|
||||
print_date ((time_t) changed);
|
||||
print_date (changed);
|
||||
}
|
||||
|
||||
/*
|
||||
@@ -277,7 +276,7 @@ static void list_fields (void)
|
||||
(void) puts (_("never"));
|
||||
} else {
|
||||
expires = changed + maxdays * SCALE;
|
||||
print_date ((time_t) expires);
|
||||
print_date (expires);
|
||||
}
|
||||
|
||||
/*
|
||||
@@ -298,7 +297,7 @@ static void list_fields (void)
|
||||
(void) puts (_("never"));
|
||||
} else {
|
||||
expires = changed + (maxdays + inactdays) * SCALE;
|
||||
print_date ((time_t) expires);
|
||||
print_date (expires);
|
||||
}
|
||||
|
||||
/*
|
||||
@@ -310,7 +309,7 @@ static void list_fields (void)
|
||||
(void) puts (_("never"));
|
||||
} else {
|
||||
expires = expdate * SCALE;
|
||||
print_date ((time_t) expires);
|
||||
print_date (expires);
|
||||
}
|
||||
|
||||
/*
|
||||
@@ -835,8 +834,7 @@ int main (int argc, char **argv)
|
||||
}
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"display aging info",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
"display aging info", user_name, user_uid, 1);
|
||||
#endif
|
||||
list_fields ();
|
||||
fail_exit (E_SUCCESS);
|
||||
@@ -858,40 +856,38 @@ int main (int argc, char **argv)
|
||||
else {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change all aging information",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
user_name, user_uid, 1);
|
||||
}
|
||||
#endif
|
||||
} else {
|
||||
#ifdef WITH_AUDIT
|
||||
if (Mflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change max age",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
"change max age", user_name, user_uid, 1);
|
||||
}
|
||||
if (mflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change min age",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
"change min age", user_name, user_uid, 1);
|
||||
}
|
||||
if (dflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change last change date",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
user_name, user_uid, 1);
|
||||
}
|
||||
if (Wflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change passwd warning",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
user_name, user_uid, 1);
|
||||
}
|
||||
if (Iflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change inactive days",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
user_name, user_uid, 1);
|
||||
}
|
||||
if (Eflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"change passwd expiration",
|
||||
user_name, (unsigned int) user_uid, 1);
|
||||
user_name, user_uid, 1);
|
||||
}
|
||||
#endif
|
||||
}
|
||||
|
||||
@@ -484,7 +484,7 @@ int main (int argc, char **argv)
|
||||
* last change date is set in the age only if aging information is
|
||||
* present.
|
||||
*/
|
||||
while (fgets (buf, (int) sizeof buf, stdin) != NULL) {
|
||||
while (fgets (buf, sizeof buf, stdin) != NULL) {
|
||||
line++;
|
||||
cp = strrchr (buf, '\n');
|
||||
if (NULL != cp) {
|
||||
@@ -493,7 +493,7 @@ int main (int argc, char **argv)
|
||||
if (feof (stdin) == 0) {
|
||||
|
||||
// Drop all remaining characters on this line.
|
||||
while (fgets (buf, (int) sizeof buf, stdin) != NULL) {
|
||||
while (fgets (buf, sizeof buf, stdin) != NULL) {
|
||||
cp = strchr (buf, '\n');
|
||||
if (cp != NULL) {
|
||||
break;
|
||||
@@ -608,7 +608,7 @@ int main (int argc, char **argv)
|
||||
if (NULL != sp) {
|
||||
newsp = *sp;
|
||||
newsp.sp_pwdp = cp;
|
||||
newsp.sp_lstchg = (long) gettime () / SCALE;
|
||||
newsp.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == newsp.sp_lstchg) {
|
||||
/* Better disable aging than requiring a
|
||||
* password change */
|
||||
|
||||
@@ -106,7 +106,7 @@ static void print_one (/*@null@*/const struct passwd *pw, bool force)
|
||||
* entered for this user, which should be able to get the
|
||||
* empty entry in this case.
|
||||
*/
|
||||
if (fread ((char *) &fl, sizeof (fl), 1, fail) != 1) {
|
||||
if (fread (&fl, sizeof (fl), 1, fail) != 1) {
|
||||
fprintf (stderr,
|
||||
_("%s: Failed to get the entry for UID %lu\n"),
|
||||
Prog, (unsigned long int)pw->pw_uid);
|
||||
@@ -166,7 +166,7 @@ static void print_one (/*@null@*/const struct passwd *pw, bool force)
|
||||
static void print (void)
|
||||
{
|
||||
if (uflg && has_umin && has_umax && (umin==umax)) {
|
||||
print_one (getpwuid ((uid_t)umin), true);
|
||||
print_one (getpwuid (umin), true);
|
||||
} else {
|
||||
/* We only print records for existing users.
|
||||
* Loop based on the user database instead of reading the
|
||||
@@ -208,7 +208,7 @@ static bool reset_one (uid_t uid)
|
||||
* entered for this user, which should be able to get the
|
||||
* empty entry in this case.
|
||||
*/
|
||||
if (fread ((char *) &fl, sizeof (fl), 1, fail) != 1) {
|
||||
if (fread (&fl, sizeof (fl), 1, fail) != 1) {
|
||||
fprintf (stderr,
|
||||
_("%s: Failed to get the entry for UID %lu\n"),
|
||||
Prog, (unsigned long int)uid);
|
||||
@@ -234,7 +234,7 @@ static bool reset_one (uid_t uid)
|
||||
fl.fail_cnt = 0;
|
||||
|
||||
if ( (fseeko (fail, offset, SEEK_SET) == 0)
|
||||
&& (fwrite ((char *) &fl, sizeof (fl), 1, fail) == 1)) {
|
||||
&& (fwrite (&fl, sizeof (fl), 1, fail) == 1)) {
|
||||
(void) fflush (fail);
|
||||
return false;
|
||||
}
|
||||
@@ -248,7 +248,7 @@ static bool reset_one (uid_t uid)
|
||||
static void reset (void)
|
||||
{
|
||||
if (uflg && has_umin && has_umax && (umin==umax)) {
|
||||
if (reset_one ((uid_t)umin)) {
|
||||
if (reset_one (umin)) {
|
||||
errors = true;
|
||||
}
|
||||
} else {
|
||||
@@ -260,7 +260,7 @@ static void reset (void)
|
||||
uidmax--;
|
||||
}
|
||||
if (has_umax && (uid_t)umax < uidmax) {
|
||||
uidmax = (uid_t)umax;
|
||||
uidmax = umax;
|
||||
}
|
||||
|
||||
/* Reset all entries in the specified range.
|
||||
@@ -273,7 +273,7 @@ static void reset (void)
|
||||
|
||||
/* Make sure we stay in the umin-umax range if specified */
|
||||
if (has_umin) {
|
||||
uid = (uid_t)umin;
|
||||
uid = umin;
|
||||
}
|
||||
|
||||
while (uid <= uidmax) {
|
||||
@@ -322,7 +322,7 @@ static bool setmax_one (uid_t uid, short max)
|
||||
* entered for this user, which should be able to get the
|
||||
* empty entry in this case.
|
||||
*/
|
||||
if (fread ((char *) &fl, sizeof (fl), 1, fail) != 1) {
|
||||
if (fread (&fl, sizeof (fl), 1, fail) != 1) {
|
||||
fprintf (stderr,
|
||||
_("%s: Failed to get the entry for UID %lu\n"),
|
||||
Prog, (unsigned long int)uid);
|
||||
@@ -349,7 +349,7 @@ static bool setmax_one (uid_t uid, short max)
|
||||
fl.fail_max = max;
|
||||
|
||||
if ( (fseeko (fail, offset, SEEK_SET) == 0)
|
||||
&& (fwrite ((char *) &fl, sizeof (fl), 1, fail) == 1)) {
|
||||
&& (fwrite (&fl, sizeof (fl), 1, fail) == 1)) {
|
||||
(void) fflush (fail);
|
||||
return false;
|
||||
}
|
||||
@@ -363,7 +363,7 @@ static bool setmax_one (uid_t uid, short max)
|
||||
static void setmax (short max)
|
||||
{
|
||||
if (uflg && has_umin && has_umax && (umin==umax)) {
|
||||
if (setmax_one ((uid_t)umin, max)) {
|
||||
if (setmax_one (umin, max)) {
|
||||
errors = true;
|
||||
}
|
||||
} else {
|
||||
@@ -387,10 +387,10 @@ static void setmax (short max)
|
||||
|
||||
/* Make sure we stay in the umin-umax range if specified */
|
||||
if (has_umin) {
|
||||
uid = (uid_t)umin;
|
||||
uid = umin;
|
||||
}
|
||||
if (has_umax) {
|
||||
uidmax = (uid_t)umax;
|
||||
uidmax = umax;
|
||||
}
|
||||
|
||||
while (uid <= uidmax) {
|
||||
@@ -439,7 +439,7 @@ static bool set_locktime_one (uid_t uid, long locktime)
|
||||
* entered for this user, which should be able to get the
|
||||
* empty entry in this case.
|
||||
*/
|
||||
if (fread ((char *) &fl, sizeof (fl), 1, fail) != 1) {
|
||||
if (fread (&fl, sizeof (fl), 1, fail) != 1) {
|
||||
fprintf (stderr,
|
||||
_("%s: Failed to get the entry for UID %lu\n"),
|
||||
Prog, (unsigned long int)uid);
|
||||
@@ -466,7 +466,7 @@ static bool set_locktime_one (uid_t uid, long locktime)
|
||||
fl.fail_locktime = locktime;
|
||||
|
||||
if ( (fseeko (fail, offset, SEEK_SET) == 0)
|
||||
&& (fwrite ((char *) &fl, sizeof (fl), 1, fail) == 1)) {
|
||||
&& (fwrite (&fl, sizeof (fl), 1, fail) == 1)) {
|
||||
(void) fflush (fail);
|
||||
return false;
|
||||
}
|
||||
@@ -480,7 +480,7 @@ static bool set_locktime_one (uid_t uid, long locktime)
|
||||
static void set_locktime (long locktime)
|
||||
{
|
||||
if (uflg && has_umin && has_umax && (umin==umax)) {
|
||||
if (set_locktime_one ((uid_t)umin, locktime)) {
|
||||
if (set_locktime_one (umin, locktime)) {
|
||||
errors = true;
|
||||
}
|
||||
} else {
|
||||
@@ -504,10 +504,10 @@ static void set_locktime (long locktime)
|
||||
|
||||
/* Make sure we stay in the umin-umax range if specified */
|
||||
if (has_umin) {
|
||||
uid = (uid_t)umin;
|
||||
uid = umin;
|
||||
}
|
||||
if (has_umax) {
|
||||
uidmax = (uid_t)umax;
|
||||
uidmax = umax;
|
||||
}
|
||||
|
||||
while (uid <= uidmax) {
|
||||
@@ -598,7 +598,7 @@ int main (int argc, char **argv)
|
||||
Prog, optarg);
|
||||
exit (E_BAD_ARG);
|
||||
}
|
||||
fail_max = (short) lmax;
|
||||
fail_max = lmax;
|
||||
mflg = true;
|
||||
break;
|
||||
}
|
||||
@@ -632,7 +632,7 @@ int main (int argc, char **argv)
|
||||
/* local, no need for xgetpwnam */
|
||||
pwent = getpwnam (optarg);
|
||||
if (NULL != pwent) {
|
||||
umin = (unsigned long) pwent->pw_uid;
|
||||
umin = pwent->pw_uid;
|
||||
has_umin = true;
|
||||
umax = umin;
|
||||
has_umax = true;
|
||||
|
||||
@@ -264,8 +264,7 @@ static void close_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_GROUP, Prog,
|
||||
"adding group to /etc/group",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "group added to %s: name=%s, GID=%u",
|
||||
gr_dbname (), group_name, (unsigned int) group_id));
|
||||
@@ -286,8 +285,7 @@ static void close_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_GROUP, Prog,
|
||||
"adding group to /etc/gshadow",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "group added to %s: name=%s",
|
||||
sgr_dbname (), group_name));
|
||||
@@ -301,9 +299,7 @@ static void close_files (void)
|
||||
/* Report success at the system level */
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_GROUP, Prog,
|
||||
"",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
"", group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "new group: name=%s, GID=%u",
|
||||
group_name, (unsigned int) group_id));
|
||||
|
||||
@@ -149,8 +149,7 @@ static void close_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_GROUP, Prog,
|
||||
"removing group from /etc/group",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"group '%s' removed from %s",
|
||||
@@ -174,8 +173,7 @@ static void close_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_GROUP, Prog,
|
||||
"removing group from /etc/gshadow",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"group '%s' removed from %s",
|
||||
@@ -190,9 +188,7 @@ static void close_files (void)
|
||||
/* Report success at the system level */
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_GROUP, Prog,
|
||||
"",
|
||||
group_name, (unsigned int) group_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
"", group_name, group_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "group '%s' removed\n", group_name));
|
||||
del_cleanup (cleanup_report_del_group);
|
||||
|
||||
@@ -116,7 +116,7 @@ static void print_one (/*@null@*/const struct passwd *pw)
|
||||
* entered for this user, which should be able to get the
|
||||
* empty entry in this case.
|
||||
*/
|
||||
if (fread ((char *) &ll, sizeof (ll), 1, lastlogfile) != 1) {
|
||||
if (fread (&ll, sizeof (ll), 1, lastlogfile) != 1) {
|
||||
fprintf (stderr,
|
||||
_("%s: Failed to get the entry for UID %lu\n"),
|
||||
Prog, (unsigned long int)pw->pw_uid);
|
||||
@@ -184,7 +184,7 @@ static void print (void)
|
||||
}
|
||||
|
||||
if (uflg && has_umin && has_umax && (umin == umax)) {
|
||||
print_one (getpwuid ((uid_t)umin));
|
||||
print_one (getpwuid (umin));
|
||||
} else {
|
||||
setpwent ();
|
||||
while ( (pwent = getpwent ()) != NULL ) {
|
||||
@@ -227,14 +227,14 @@ static void update_one (/*@null@*/const struct passwd *pw)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ACCT_UNLOCK, Prog,
|
||||
"clearing-lastlog",
|
||||
pw->pw_name, (unsigned int) pw->pw_uid, SHADOW_AUDIT_SUCCESS);
|
||||
pw->pw_name, pw->pw_uid, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
}
|
||||
#ifdef WITH_AUDIT
|
||||
else {
|
||||
audit_logger (AUDIT_ACCT_UNLOCK, Prog,
|
||||
"refreshing-lastlog",
|
||||
pw->pw_name, (unsigned int) pw->pw_uid, SHADOW_AUDIT_SUCCESS);
|
||||
pw->pw_name, pw->pw_uid, SHADOW_AUDIT_SUCCESS);
|
||||
}
|
||||
#endif
|
||||
|
||||
@@ -263,7 +263,7 @@ static void update (void)
|
||||
}
|
||||
|
||||
if (has_umin && has_umax && (umin == umax)) {
|
||||
update_one (getpwuid ((uid_t)umin));
|
||||
update_one (getpwuid (umin));
|
||||
} else {
|
||||
setpwent ();
|
||||
while ( (pwent = getpwent ()) != NULL ) {
|
||||
@@ -375,7 +375,7 @@ int main (int argc, char **argv)
|
||||
/* local, no need for xgetpwnam */
|
||||
pwent = getpwnam (optarg);
|
||||
if (NULL != pwent) {
|
||||
umin = (unsigned long) pwent->pw_uid;
|
||||
umin = pwent->pw_uid;
|
||||
has_umin = true;
|
||||
umax = umin;
|
||||
has_umax = true;
|
||||
|
||||
19
src/login.c
19
src/login.c
@@ -167,10 +167,10 @@ static void setup_tty (void)
|
||||
#endif
|
||||
|
||||
/* leave these values unchanged if not specified in login.defs */
|
||||
erasechar = getdef_num ("ERASECHAR", (int) termio.c_cc[VERASE]);
|
||||
killchar = getdef_num ("KILLCHAR", (int) termio.c_cc[VKILL]);
|
||||
termio.c_cc[VERASE] = (cc_t) erasechar;
|
||||
termio.c_cc[VKILL] = (cc_t) killchar;
|
||||
erasechar = getdef_num ("ERASECHAR", termio.c_cc[VERASE]);
|
||||
killchar = getdef_num ("KILLCHAR", termio.c_cc[VKILL]);
|
||||
termio.c_cc[VERASE] = erasechar;
|
||||
termio.c_cc[VKILL] = killchar;
|
||||
/* Make sure the values were valid.
|
||||
* getdef_num cannot validate this.
|
||||
*/
|
||||
@@ -411,17 +411,17 @@ static void alarm_handler (unused int sig)
|
||||
*/
|
||||
static void get_pam_user (char **ptr_pam_user)
|
||||
{
|
||||
int retcode;
|
||||
void *ptr_user;
|
||||
int retcode;
|
||||
const void *ptr_user;
|
||||
|
||||
assert (NULL != ptr_pam_user);
|
||||
|
||||
retcode = pam_get_item (pamh, PAM_USER, (const void **)&ptr_user);
|
||||
retcode = pam_get_item (pamh, PAM_USER, &ptr_user);
|
||||
PAM_FAIL_CHECK;
|
||||
|
||||
free (*ptr_pam_user);
|
||||
if (NULL != ptr_user) {
|
||||
*ptr_pam_user = xstrdup ((const char *)ptr_user);
|
||||
*ptr_pam_user = xstrdup (ptr_user);
|
||||
} else {
|
||||
*ptr_pam_user = NULL;
|
||||
}
|
||||
@@ -938,7 +938,8 @@ int main (int argc, char **argv)
|
||||
}
|
||||
|
||||
if (strcmp (user_passwd, "") == 0) {
|
||||
char *prevent_no_auth = getdef_str("PREVENT_NO_AUTH");
|
||||
const char *prevent_no_auth = getdef_str("PREVENT_NO_AUTH");
|
||||
|
||||
if (prevent_no_auth == NULL) {
|
||||
prevent_no_auth = "superuser";
|
||||
}
|
||||
|
||||
@@ -39,6 +39,7 @@
|
||||
* Author: Wietse Venema, Eindhoven University of Technology, The Netherlands.
|
||||
*/
|
||||
#include <sys/types.h>
|
||||
#include <stddef.h>
|
||||
#include <stdio.h>
|
||||
#include <syslog.h>
|
||||
#include <ctype.h>
|
||||
@@ -96,10 +97,10 @@ int login_access (const char *user, const char *from)
|
||||
if (NULL != fp) {
|
||||
int lineno = 0; /* for diagnostics */
|
||||
while ( !match
|
||||
&& (fgets (line, (int) sizeof (line), fp) == line)) {
|
||||
int end;
|
||||
&& (fgets (line, sizeof (line), fp) == line)) {
|
||||
ptrdiff_t end;
|
||||
lineno++;
|
||||
end = (int) strlen (line) - 1;
|
||||
end = strlen (line) - 1;
|
||||
if (line[0] == '\0' || line[end] != '\n') {
|
||||
SYSLOG ((LOG_ERR,
|
||||
"%s: line %d: missing newline or line too long",
|
||||
|
||||
45
src/newgrp.c
45
src/newgrp.c
@@ -187,8 +187,7 @@ static void check_perms (const struct group *grp,
|
||||
"authentication new-gid=%lu",
|
||||
(unsigned long) grp->gr_gid);
|
||||
audit_logger (AUDIT_GRP_AUTH, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"Invalid password for group '%s' from '%s'",
|
||||
@@ -202,8 +201,7 @@ static void check_perms (const struct group *grp,
|
||||
"authentication new-gid=%lu",
|
||||
(unsigned long) grp->gr_gid);
|
||||
audit_logger (AUDIT_GRP_AUTH, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 1);
|
||||
audit_buf, NULL, getuid (), 1);
|
||||
#endif
|
||||
}
|
||||
|
||||
@@ -219,12 +217,10 @@ failure:
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-group=%s", groupname);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
} else {
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
"changing", NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
"changing", NULL, getuid (), 0);
|
||||
}
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
@@ -300,12 +296,10 @@ static void syslog_sg (const char *name, const char *group)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-group=%s", group);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
} else {
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
"changing", NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
"changing", NULL, getuid (), 0);
|
||||
}
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
@@ -434,8 +428,7 @@ int main (int argc, char **argv)
|
||||
Prog);
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
"changing", NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
"changing", NULL, getuid (), 0);
|
||||
#endif
|
||||
SYSLOG ((LOG_WARN, "Cannot determine the user name of the caller (UID %lu)",
|
||||
(unsigned long) getuid ()));
|
||||
@@ -554,12 +547,10 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-group=%s", group);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
} else {
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
"changing", NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
"changing", NULL, getuid (), 0);
|
||||
}
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
@@ -716,8 +707,7 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-gid=%lu", (unsigned long) gid);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
}
|
||||
@@ -728,8 +718,7 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-gid=%lu", (unsigned long) gid);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
}
|
||||
@@ -745,8 +734,7 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-gid=%lu", (unsigned long) gid);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
#endif
|
||||
perror (SHELL);
|
||||
exit ((errno == ENOENT) ? E_CMD_NOTFOUND : E_CMD_NOEXEC);
|
||||
@@ -813,8 +801,7 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf), "changing new-gid=%lu",
|
||||
(unsigned long) gid);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 1);
|
||||
audit_buf, NULL, getuid (), 1);
|
||||
#endif
|
||||
/*
|
||||
* Exec the login shell and go away. We are trying to get back to
|
||||
@@ -841,12 +828,10 @@ int main (int argc, char **argv)
|
||||
snprintf (audit_buf, sizeof(audit_buf),
|
||||
"changing new-group=%s", group);
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
audit_buf, NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
audit_buf, NULL, getuid (), 0);
|
||||
} else {
|
||||
audit_logger (AUDIT_CHGRP_ID, Prog,
|
||||
"changing", NULL,
|
||||
(unsigned int) getuid (), 0);
|
||||
"changing", NULL, getuid (), 0);
|
||||
}
|
||||
#endif
|
||||
exit (EXIT_FAILURE);
|
||||
|
||||
@@ -245,11 +245,11 @@ static int add_group (const char *name, const char *gid, gid_t *ngid, uid_t uid)
|
||||
/* Look in both the system database (getgrgid) and in the
|
||||
* internal database (gr_locate_gid), which may contain
|
||||
* uncommitted changes */
|
||||
if ( (getgrgid ((gid_t) grent.gr_gid) != NULL)
|
||||
|| (gr_locate_gid ((gid_t) grent.gr_gid) != NULL)) {
|
||||
if ( (getgrgid (grent.gr_gid) != NULL)
|
||||
|| (gr_locate_gid (grent.gr_gid) != NULL)) {
|
||||
/* The user will use this ID for her
|
||||
* primary group */
|
||||
*ngid = (gid_t) grent.gr_gid;
|
||||
*ngid = grent.gr_gid;
|
||||
return 0;
|
||||
}
|
||||
|
||||
@@ -527,7 +527,7 @@ static int add_passwd (struct passwd *pwd, const char *password)
|
||||
}
|
||||
spent.sp_pwdp = cp;
|
||||
}
|
||||
spent.sp_lstchg = (long) gettime () / SCALE;
|
||||
spent.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent.sp_lstchg) {
|
||||
/* Better disable aging than requiring a password
|
||||
* change */
|
||||
@@ -584,7 +584,7 @@ static int add_passwd (struct passwd *pwd, const char *password)
|
||||
*/
|
||||
spent.sp_pwdp = "!";
|
||||
#endif
|
||||
spent.sp_lstchg = (long) gettime () / SCALE;
|
||||
spent.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent.sp_lstchg) {
|
||||
/* Better disable aging than requiring a password change */
|
||||
spent.sp_lstchg = -1;
|
||||
@@ -1088,7 +1088,7 @@ int main (int argc, char **argv)
|
||||
* over 100 is allocated. The pw_gid field will be updated with that
|
||||
* value.
|
||||
*/
|
||||
while (fgets (buf, (int) sizeof buf, stdin) != NULL) {
|
||||
while (fgets (buf, sizeof buf, stdin) != NULL) {
|
||||
line++;
|
||||
cp = strrchr (buf, '\n');
|
||||
if (NULL != cp) {
|
||||
|
||||
@@ -646,7 +646,7 @@ static void update_shadow (void)
|
||||
}
|
||||
#ifndef USE_PAM
|
||||
if (do_update_age) {
|
||||
nsp->sp_lstchg = (long) gettime () / SCALE;
|
||||
nsp->sp_lstchg = gettime () / SCALE;
|
||||
if (0 == nsp->sp_lstchg) {
|
||||
/* Better disable aging than requiring a password
|
||||
* change */
|
||||
|
||||
@@ -369,8 +369,8 @@ static void check_pw_file (int *errors, bool *changed)
|
||||
struct commonio_entry *pfe, *tpfe;
|
||||
struct passwd *pwd;
|
||||
const struct spwd *spw;
|
||||
uid_t min_sys_id = (uid_t) getdef_ulong ("SYS_UID_MIN", 101UL);
|
||||
uid_t max_sys_id = (uid_t) getdef_ulong ("SYS_UID_MAX", 999UL);
|
||||
uid_t min_sys_id = getdef_ulong ("SYS_UID_MIN", 101UL);
|
||||
uid_t max_sys_id = getdef_ulong ("SYS_UID_MAX", 999UL);
|
||||
|
||||
/*
|
||||
* Loop through the entire password file.
|
||||
@@ -609,7 +609,7 @@ static void check_pw_file (int *errors, bool *changed)
|
||||
sp.sp_inact = -1;
|
||||
sp.sp_expire = -1;
|
||||
sp.sp_flag = SHADOW_SP_FLAG_UNSET;
|
||||
sp.sp_lstchg = (long) gettime () / SCALE;
|
||||
sp.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == sp.sp_lstchg) {
|
||||
/* Better disable aging than
|
||||
* requiring a password change
|
||||
|
||||
@@ -247,7 +247,7 @@ int main (int argc, char **argv)
|
||||
spent.sp_flag = SHADOW_SP_FLAG_UNSET;
|
||||
}
|
||||
spent.sp_pwdp = pw->pw_passwd;
|
||||
spent.sp_lstchg = (long) gettime () / SCALE;
|
||||
spent.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent.sp_lstchg) {
|
||||
/* Better disable aging than requiring a password
|
||||
* change */
|
||||
|
||||
13
src/su.c
13
src/su.c
@@ -225,7 +225,7 @@ static void execve_shell (const char *shellname,
|
||||
char *const envp[])
|
||||
{
|
||||
int err;
|
||||
(void) execve (shellname, (char **) args, envp);
|
||||
(void) execve (shellname, args, envp);
|
||||
err = errno;
|
||||
|
||||
if (access (shellname, R_OK|X_OK) == 0) {
|
||||
@@ -501,7 +501,8 @@ static void check_perms_nopam (const struct passwd *pw)
|
||||
}
|
||||
|
||||
if (strcmp (pw->pw_passwd, "") == 0) {
|
||||
char *prevent_no_auth = getdef_str("PREVENT_NO_AUTH");
|
||||
const char *prevent_no_auth = getdef_str("PREVENT_NO_AUTH");
|
||||
|
||||
if (prevent_no_auth == NULL) {
|
||||
prevent_no_auth = "superuser";
|
||||
}
|
||||
@@ -621,7 +622,7 @@ static void check_perms_nopam (const struct passwd *pw)
|
||||
static /*@only@*/struct passwd * check_perms (void)
|
||||
{
|
||||
#ifdef USE_PAM
|
||||
const char *tmp_name;
|
||||
const void *tmp_name;
|
||||
int ret;
|
||||
#endif /* !USE_PAM */
|
||||
/*
|
||||
@@ -642,7 +643,7 @@ static /*@only@*/struct passwd * check_perms (void)
|
||||
#ifdef USE_PAM
|
||||
check_perms_pam (pw);
|
||||
/* PAM authentication can request a change of account */
|
||||
ret = pam_get_item(pamh, PAM_USER, (const void **) &tmp_name);
|
||||
ret = pam_get_item(pamh, PAM_USER, &tmp_name);
|
||||
if (ret != PAM_SUCCESS) {
|
||||
SYSLOG((LOG_ERR, "pam_get_item: internal PAM error\n"));
|
||||
(void) fprintf (stderr,
|
||||
@@ -1001,9 +1002,9 @@ int main (int argc, char **argv)
|
||||
exit (1);
|
||||
}
|
||||
|
||||
ret = pam_set_item (pamh, PAM_TTY, (const void *) caller_tty);
|
||||
ret = pam_set_item (pamh, PAM_TTY, caller_tty);
|
||||
if (PAM_SUCCESS == ret) {
|
||||
ret = pam_set_item (pamh, PAM_RUSER, (const void *) caller_name);
|
||||
ret = pam_set_item (pamh, PAM_RUSER, caller_name);
|
||||
}
|
||||
if (PAM_SUCCESS != ret) {
|
||||
SYSLOG ((LOG_ERR, "pam_set_item: %s",
|
||||
|
||||
@@ -92,9 +92,9 @@ int check_su_auth (const char *actual_id,
|
||||
continue;
|
||||
}
|
||||
if (!(to_users = strtok (temp + posn, field))
|
||||
|| !(from_users = strtok ((char *) NULL, field))
|
||||
|| !(action = strtok ((char *) NULL, field))
|
||||
|| strtok ((char *) NULL, field)) {
|
||||
|| !(from_users = strtok (NULL, field))
|
||||
|| !(action = strtok (NULL, field))
|
||||
|| strtok (NULL, field)) {
|
||||
SYSLOG ((LOG_ERR,
|
||||
"%s, line %d. Bad number of fields.\n",
|
||||
SUAUTHFILE, lines));
|
||||
|
||||
@@ -375,7 +375,7 @@ static void get_defaults (void)
|
||||
* Read the file a line at a time. Only the lines that have relevant
|
||||
* values are used, everything else can be ignored.
|
||||
*/
|
||||
while (fgets (buf, (int) sizeof buf, fp) == buf) {
|
||||
while (fgets (buf, sizeof buf, fp) == buf) {
|
||||
cp = strrchr (buf, '\n');
|
||||
if (NULL != cp) {
|
||||
*cp = '\0';
|
||||
@@ -653,7 +653,7 @@ static int set_defaults (void)
|
||||
goto skip;
|
||||
}
|
||||
|
||||
while (fgets (buf, (int) sizeof buf, ifp) == buf) {
|
||||
while (fgets (buf, sizeof buf, ifp) == buf) {
|
||||
cp = strrchr (buf, '\n');
|
||||
if (NULL != cp) {
|
||||
*cp = '\0';
|
||||
@@ -925,7 +925,7 @@ static struct group * get_local_group(char * grp_name)
|
||||
&& ('\0' == *endptr)
|
||||
&& (ERANGE != errno)
|
||||
&& (gid == (gid_t)gid)) {
|
||||
grp = gr_locate_gid ((gid_t) gid);
|
||||
grp = gr_locate_gid (gid);
|
||||
}
|
||||
else {
|
||||
grp = gr_locate(grp_name);
|
||||
@@ -1043,7 +1043,7 @@ static void new_spent (struct spwd *spent)
|
||||
memzero (spent, sizeof *spent);
|
||||
spent->sp_namp = (char *) user_name;
|
||||
spent->sp_pwdp = (char *) user_pass;
|
||||
spent->sp_lstchg = (long) gettime () / SCALE;
|
||||
spent->sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent->sp_lstchg) {
|
||||
/* Better disable aging than requiring a password change */
|
||||
spent->sp_lstchg = -1;
|
||||
@@ -2095,7 +2095,7 @@ static void lastlog_reset (uid_t uid)
|
||||
return;
|
||||
}
|
||||
|
||||
max_uid = (uid_t) getdef_ulong ("LASTLOG_UID_MAX", 0xFFFFFFFFUL);
|
||||
max_uid = getdef_ulong ("LASTLOG_UID_MAX", 0xFFFFFFFFUL);
|
||||
if (uid > max_uid) {
|
||||
/* do not touch lastlog for large uids */
|
||||
return;
|
||||
@@ -2237,8 +2237,7 @@ static void usr_update (unsigned long subuid_count, unsigned long subgid_count)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"adding shadow password",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif
|
||||
fail_exit (E_PW_UPDATE);
|
||||
}
|
||||
@@ -2359,9 +2358,8 @@ static void create_home (void)
|
||||
Prog, path);
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"adding home directory",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
"adding home directory",
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif
|
||||
fail_exit (E_HOMEDIR);
|
||||
}
|
||||
@@ -2391,8 +2389,7 @@ static void create_home (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"adding home directory",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif
|
||||
#ifdef WITH_SELINUX
|
||||
/* Reset SELinux to create files with default contexts */
|
||||
@@ -2488,13 +2485,13 @@ static void check_uid_range(int rflg, uid_t user_id)
|
||||
uid_t uid_min ;
|
||||
uid_t uid_max ;
|
||||
if (rflg) {
|
||||
uid_max = (uid_t)getdef_ulong("SYS_UID_MAX",getdef_ulong("UID_MIN",1000UL)-1);
|
||||
uid_max = getdef_ulong("SYS_UID_MAX",getdef_ulong("UID_MIN",1000UL)-1);
|
||||
if (user_id > uid_max) {
|
||||
fprintf(stderr, _("%s warning: %s's uid %d is greater than SYS_UID_MAX %d\n"), Prog, user_name, user_id, uid_max);
|
||||
}
|
||||
}else{
|
||||
uid_min = (uid_t)getdef_ulong("UID_MIN", 1000UL);
|
||||
uid_max = (uid_t)getdef_ulong("UID_MAX", 6000UL);
|
||||
uid_min = getdef_ulong("UID_MIN", 1000UL);
|
||||
uid_max = getdef_ulong("UID_MAX", 6000UL);
|
||||
if (uid_min <= uid_max) {
|
||||
if (user_id < uid_min || user_id >uid_max)
|
||||
fprintf(stderr, _("%s warning: %s's uid %d outside of the UID_MIN %d and UID_MAX %d range.\n"), Prog, user_name, user_id, uid_min, uid_max);
|
||||
@@ -2559,8 +2556,8 @@ int main (int argc, char **argv)
|
||||
process_flags (argc, argv);
|
||||
|
||||
#ifdef ENABLE_SUBIDS
|
||||
uid_min = (uid_t) getdef_ulong ("UID_MIN", 1000UL);
|
||||
uid_max = (uid_t) getdef_ulong ("UID_MAX", 60000UL);
|
||||
uid_min = getdef_ulong ("UID_MIN", 1000UL);
|
||||
uid_max = getdef_ulong ("UID_MAX", 60000UL);
|
||||
subuid_count = getdef_ulong ("SUB_UID_COUNT", 65536);
|
||||
subgid_count = getdef_ulong ("SUB_GID_COUNT", 65536);
|
||||
is_sub_uid = subuid_count > 0 && sub_uid_file_present () &&
|
||||
@@ -2689,7 +2686,7 @@ int main (int argc, char **argv)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"adding user",
|
||||
user_name, (unsigned int) user_id,
|
||||
user_name, user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
#endif
|
||||
fail_exit (E_UID_IN_USE);
|
||||
@@ -2768,7 +2765,7 @@ int main (int argc, char **argv)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"adding SELinux user mapping",
|
||||
user_name, (unsigned int) user_id, 0);
|
||||
user_name, user_id, 0);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SE_UPDATE);
|
||||
}
|
||||
|
||||
@@ -204,8 +204,7 @@ static void update_groups (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting user from group",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif /* WITH_AUDIT */
|
||||
SYSLOG ((LOG_INFO, "delete '%s' from group '%s'\n",
|
||||
user_name, ngrp->gr_name));
|
||||
@@ -266,8 +265,7 @@ static void update_groups (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting user from shadow group",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif /* WITH_AUDIT */
|
||||
SYSLOG ((LOG_INFO, "delete '%s' from shadow group '%s'\n",
|
||||
user_name, nsgrp->sg_name));
|
||||
@@ -526,8 +524,7 @@ static void fail_exit (int code)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting user",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
|
||||
exit (code);
|
||||
@@ -548,8 +545,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking password file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_PW_UPDATE);
|
||||
}
|
||||
@@ -560,8 +556,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening password file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_PW_UPDATE);
|
||||
}
|
||||
@@ -573,8 +568,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking shadow password file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_PW_UPDATE);
|
||||
}
|
||||
@@ -586,8 +580,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening shadow password file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_PW_UPDATE);
|
||||
}
|
||||
@@ -599,8 +592,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_GRP_UPDATE);
|
||||
}
|
||||
@@ -610,8 +602,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_GRP_UPDATE);
|
||||
}
|
||||
@@ -624,8 +615,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking shadow group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_GRP_UPDATE);
|
||||
}
|
||||
@@ -636,8 +626,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening shadow group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_GRP_UPDATE);
|
||||
}
|
||||
@@ -652,8 +641,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking subordinate user file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SUB_UID_UPDATE);
|
||||
}
|
||||
@@ -664,8 +652,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening subordinate user file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SUB_UID_UPDATE);
|
||||
}
|
||||
@@ -678,8 +665,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"locking subordinate group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SUB_GID_UPDATE);
|
||||
}
|
||||
@@ -690,8 +676,7 @@ static void open_files (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"opening subordinate group file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SUB_GID_UPDATE);
|
||||
}
|
||||
@@ -738,8 +723,7 @@ static void update_user (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting user entries",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
#endif /* WITH_AUDIT */
|
||||
SYSLOG ((LOG_INFO, "delete user '%s'\n", user_name));
|
||||
}
|
||||
@@ -846,8 +830,7 @@ static int remove_mailbox (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
free(mailfile);
|
||||
return -1;
|
||||
@@ -863,8 +846,7 @@ static int remove_mailbox (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
errors = 1;
|
||||
/* continue */
|
||||
@@ -874,8 +856,7 @@ static int remove_mailbox (void)
|
||||
{
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
}
|
||||
#endif /* WITH_AUDIT */
|
||||
free(mailfile);
|
||||
@@ -892,8 +873,7 @@ static int remove_mailbox (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
free(mailfile);
|
||||
return 1;
|
||||
@@ -909,8 +889,7 @@ static int remove_mailbox (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
errors = 1;
|
||||
/* continue */
|
||||
@@ -920,8 +899,7 @@ static int remove_mailbox (void)
|
||||
{
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting mail file",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
}
|
||||
#endif /* WITH_AUDIT */
|
||||
free(mailfile);
|
||||
@@ -1290,8 +1268,7 @@ int main (int argc, char **argv)
|
||||
{
|
||||
audit_logger (AUDIT_DEL_USER, Prog,
|
||||
"deleting home directory",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_SUCCESS);
|
||||
user_name, user_id, SHADOW_AUDIT_SUCCESS);
|
||||
}
|
||||
#endif /* WITH_AUDIT */
|
||||
}
|
||||
@@ -1313,8 +1290,7 @@ int main (int argc, char **argv)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"removing SELinux user mapping",
|
||||
user_name, (unsigned int) user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
user_name, user_id, SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SE_UPDATE);
|
||||
}
|
||||
|
||||
@@ -198,7 +198,7 @@ extern int allow_bad_names;
|
||||
static int get_groups (char *list)
|
||||
{
|
||||
char *cp;
|
||||
const struct group *grp;
|
||||
struct group *grp;
|
||||
int errors = 0;
|
||||
int ngroups = 0;
|
||||
|
||||
@@ -260,7 +260,7 @@ static int get_groups (char *list)
|
||||
fprintf (stderr,
|
||||
_("%s: group '%s' is a NIS group.\n"),
|
||||
Prog, grp->gr_name);
|
||||
gr_free ((struct group *)grp);
|
||||
gr_free (grp);
|
||||
continue;
|
||||
}
|
||||
#endif
|
||||
@@ -269,7 +269,7 @@ static int get_groups (char *list)
|
||||
fprintf (stderr,
|
||||
_("%s: too many groups specified (max %d).\n"),
|
||||
Prog, ngroups);
|
||||
gr_free ((struct group *)grp);
|
||||
gr_free (grp);
|
||||
break;
|
||||
}
|
||||
|
||||
@@ -277,7 +277,7 @@ static int get_groups (char *list)
|
||||
* Add the group name to the user's list of groups.
|
||||
*/
|
||||
user_groups[ngroups++] = xstrdup (grp->gr_name);
|
||||
gr_free ((struct group *)grp);
|
||||
gr_free (grp);
|
||||
} while (NULL != list);
|
||||
|
||||
user_groups[ngroups] = NULL;
|
||||
@@ -419,8 +419,7 @@ static char *new_pw_passwd (char *pw_pass)
|
||||
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"updating passwd",
|
||||
user_newname, (unsigned int) user_newid, 0);
|
||||
"updating passwd", user_newname, user_newid, 0);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "lock user '%s' password", user_newname));
|
||||
strcpy (buf, "!");
|
||||
@@ -439,8 +438,7 @@ static char *new_pw_passwd (char *pw_pass)
|
||||
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"updating password",
|
||||
user_newname, (unsigned int) user_newid, 0);
|
||||
"updating password", user_newname, user_newid, 0);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "unlock user '%s' password", user_newname));
|
||||
s = pw_pass;
|
||||
@@ -451,8 +449,7 @@ static char *new_pw_passwd (char *pw_pass)
|
||||
} else if (pflg) {
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing password",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
"changing password", user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO, "change user '%s' password", user_newname));
|
||||
pw_pass = xstrdup (user_pass);
|
||||
@@ -481,8 +478,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
}
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing name",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
"changing name", user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user name '%s' to '%s'",
|
||||
@@ -502,8 +498,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
if (uflg) {
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing uid",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
"changing uid", user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' UID from '%d' to '%d'",
|
||||
@@ -514,7 +509,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing primary group",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' GID from '%d' to '%d'",
|
||||
@@ -524,8 +519,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
if (cflg) {
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing comment",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
"changing comment", user_newname, user_newid, 1);
|
||||
#endif
|
||||
pwent->pw_gecos = user_newcomment;
|
||||
}
|
||||
@@ -534,7 +528,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing home directory",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' home from '%s' to '%s'",
|
||||
@@ -551,7 +545,7 @@ static void new_pwent (struct passwd *pwent)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing user shell",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' shell from '%s' to '%s'",
|
||||
@@ -582,7 +576,7 @@ static void new_spent (struct spwd *spent)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing inactive days",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' inactive from '%ld' to '%ld'",
|
||||
@@ -597,7 +591,7 @@ static void new_spent (struct spwd *spent)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing expiration date",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
SYSLOG ((LOG_INFO,
|
||||
"change user '%s' expiration from '%s' to '%s'",
|
||||
@@ -617,7 +611,7 @@ static void new_spent (struct spwd *spent)
|
||||
spent->sp_pwdp = new_pw_passwd (spent->sp_pwdp);
|
||||
|
||||
if (pflg) {
|
||||
spent->sp_lstchg = (long) gettime () / SCALE;
|
||||
spent->sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent->sp_lstchg) {
|
||||
/* Better disable aging than requiring a password
|
||||
* change. */
|
||||
@@ -1736,7 +1730,7 @@ static void usr_update (void)
|
||||
spent.sp_pwdp = xstrdup (pwent.pw_passwd);
|
||||
pwent.pw_passwd = xstrdup (SHADOW_PASSWD_STRING);
|
||||
|
||||
spent.sp_lstchg = (long) gettime () / SCALE;
|
||||
spent.sp_lstchg = gettime () / SCALE;
|
||||
if (0 == spent.sp_lstchg) {
|
||||
/* Better disable aging than
|
||||
* requiring a password change */
|
||||
@@ -1823,7 +1817,7 @@ static void move_home (void)
|
||||
if (uflg || gflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing home directory owner",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
}
|
||||
#endif
|
||||
|
||||
@@ -1842,8 +1836,7 @@ static void move_home (void)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"moving home directory",
|
||||
user_newname, (unsigned int) user_newid,
|
||||
1);
|
||||
user_newname, user_newid, 1);
|
||||
#endif
|
||||
return;
|
||||
} else {
|
||||
@@ -1873,7 +1866,7 @@ static void move_home (void)
|
||||
Prog,
|
||||
"moving home directory",
|
||||
user_newname,
|
||||
(unsigned int) user_newid,
|
||||
user_newid,
|
||||
1);
|
||||
#endif
|
||||
return;
|
||||
@@ -1913,7 +1906,7 @@ static void update_lastlog (void)
|
||||
return;
|
||||
}
|
||||
|
||||
max_uid = (uid_t) getdef_ulong ("LASTLOG_UID_MAX", 0xFFFFFFFFUL);
|
||||
max_uid = getdef_ulong ("LASTLOG_UID_MAX", 0xFFFFFFFFUL);
|
||||
if (user_newid > max_uid) {
|
||||
/* do not touch lastlog for large uids */
|
||||
return;
|
||||
@@ -1988,7 +1981,7 @@ static void update_faillog (void)
|
||||
}
|
||||
|
||||
if ( (lseek (fd, off_uid, SEEK_SET) == off_uid)
|
||||
&& (read (fd, (char *) &fl, sizeof fl) == (ssize_t) sizeof fl)) {
|
||||
&& (read (fd, &fl, sizeof fl) == (ssize_t) sizeof fl)) {
|
||||
/* Copy the old entry to its new location */
|
||||
if ( (lseek (fd, off_newuid, SEEK_SET) != off_newuid)
|
||||
|| (write (fd, &fl, sizeof fl) != (ssize_t) sizeof fl)
|
||||
@@ -2091,7 +2084,7 @@ static void move_mailbox (void)
|
||||
else {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing mail file owner",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
}
|
||||
#endif
|
||||
}
|
||||
@@ -2118,7 +2111,7 @@ static void move_mailbox (void)
|
||||
else {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing mail file name",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
}
|
||||
#endif
|
||||
}
|
||||
@@ -2316,7 +2309,7 @@ int main (int argc, char **argv)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"modifying User mapping ",
|
||||
user_name, (unsigned int) user_id,
|
||||
user_name, user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SE_UPDATE);
|
||||
@@ -2329,7 +2322,7 @@ int main (int argc, char **argv)
|
||||
#ifdef WITH_AUDIT
|
||||
audit_logger (AUDIT_ADD_USER, Prog,
|
||||
"removing SELinux user mapping",
|
||||
user_name, (unsigned int) user_id,
|
||||
user_name, user_id,
|
||||
SHADOW_AUDIT_FAILURE);
|
||||
#endif /* WITH_AUDIT */
|
||||
fail_exit (E_SE_UPDATE);
|
||||
@@ -2371,7 +2364,7 @@ int main (int argc, char **argv)
|
||||
if (uflg || gflg) {
|
||||
audit_logger (AUDIT_USER_CHAUTHTOK, Prog,
|
||||
"changing home directory owner",
|
||||
user_newname, (unsigned int) user_newid, 1);
|
||||
user_newname, user_newid, 1);
|
||||
}
|
||||
#endif
|
||||
if (chown_tree (dflg ? prefix_user_newhome : prefix_user_home,
|
||||
|
||||
Reference in New Issue
Block a user